Hyperling
98f24fbbef
* Remove redundant calls to facts. * Must have accidentally removed miner/system thinking it was general/system. * Add missing variable xmr_stak_cpu. * Ignore when connection to GitHub fails. * Telegraf agents have been hoarding resources on Debian servers. Reset job will killall should work properly now. * Once the function sets accept, it is staying for the session. Need to unset in case `update -y` is run, cancelled, and then `update` is run.
35 lines
865 B
YAML
35 lines
865 B
YAML
---
|
|
# Lynis hardness check.
|
|
|
|
- name: General | Tests | Lynis | Install
|
|
git:
|
|
repo: https://github.com/CISOfy/lynis
|
|
dest: "{{ lynis_install_dir }}"
|
|
clone: yes
|
|
force: yes
|
|
ignore_errors: yes
|
|
|
|
- name: General | Tests | Lynis | Ensure Permissions (Looking at you Parrot OS!)
|
|
file:
|
|
path: "{{ lynis_install_dir }}"
|
|
state: directory
|
|
mode: '0644'
|
|
owner: root
|
|
group: "{{ root_group }}"
|
|
recurse: yes
|
|
|
|
- name: General | Tests | Lynis | Ensure Permissions 2
|
|
file:
|
|
path: "{{ lynis_install_dir }}/lynis"
|
|
mode: '0755'
|
|
|
|
- name: General | Tests | Lynis | Run System Audit
|
|
shell: "{{ lynis_install_dir }}/lynis audit system --no-colors > {{ lynis_report }} 2>&1"
|
|
args:
|
|
executable: "{{ bash_exec.stdout }}"
|
|
|
|
- name: General | Tests | Lynis | Make Report Readable
|
|
file:
|
|
path: "{{ lynis_report }}"
|
|
mode: '0777'
|